class Google::Apis::SpannerV1::Policy
google.com/iam/docs/).
description of IAM and its features, see the [IAM documentation](cloud.
timestamp(‘2020-10-01T00:00:00.000Z’) - etag: BwWWja0YfJA= - version: 3 For a
description: Does not grant access after Sep 2020 expression: request.time <
roles/resourcemanager.organizationViewer condition: title: expirable access
resourcemanager.organizationAdmin - members: - user:eve@example.com role:
com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/
members: - user:mike@example.com - group:admins@example.com - domain:google.
‘ ], “etag”: “BwWWja0YfJA=”, “version”: 3 ` **YAML example:** bindings: -
2020“, ”expression“: ”request.time < timestamp(’2020-10-01T00:00:00.000Z’)“, ‘
title”: “expirable access”, “description”: “Does not grant access after Sep
organizationViewer”, “members”: [ “user:eve@example.com” ], “condition”: ` “
appspot.gserviceaccount.com” ] `, ` “role”: “roles/resourcemanager.
group:admins@example.com”, “domain:google.com”, “serviceAccount:my-project-id@
resourcemanager.organizationAdmin”, “members”: [ “user:mike@example.com”, “
resource-policies). **JSON example:** ` ”bindings“: [ ` ”role“: ”roles/
see the [IAM documentation](cloud.google.com/iam/help/conditions/
or both. To learn which resources support conditions in their IAM policies,
condition can add constraints based on attributes of the request, the resource,
allows access to a resource only if the expression evaluates to `true`. A
a `binding` can also specify a `condition`, which is a logical expression that
role or a user-created custom role. For some types of Google Cloud resources,
A `role` is a named list of permissions; each `role` can be an IAM predefined
user accounts, service accounts, Google groups, and domains (such as G Suite).
A `binding` binds one or more `members` to a single `role`. Members can be
controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
An Identity and Access Management (IAM) policy, which specifies access
def initialize(**args)
def initialize(**args) update!(**args) end
def update!(**args)
def update!(**args) @bindings = args[:bindings] if args.key?(:bindings) @etag = args[:etag] if args.key?(:etag) @version = args[:version] if args.key?(:version) end